US Air Force expands AI and information-warfare capabilities
An Air Force ChatGPT-like pilot reportedly attracted 80,000 users, while an information-warfare hub is seeking advanced sensors and AI tools.
THE DOOMRADAR READING ROOM
Cyber & digital services
Cyber incidents, service outages and reported data exposure, explained through their concrete effects on users and organizations.
Earlier reports
Back to newestOrdered by reported development. Each article describes what was known at the time shown.
ChainDrop worm infects 2,200 npm packages and locks 275,000 accounts
The ChainDrop worm reportedly infected 2,200 npm packages and caused 275,000 accounts to be locked.
Certificate Authority RSA keys reportedly factored
RSA keys associated with a Certificate Authority have reportedly been factored. The scope, affected certificates and resulting exploitation are unspecified.
Google issues urgent Chrome update after serious vulnerability found
Google has released an urgent update for Chrome after discovering a serious vulnerability. The supplied report does not state whether the flaw is being actively exploited or how many users are affected.
Former Moroccan intelligence official allegedly infected Spanish prime minister's phone
A report says a former Moroccan intelligence official infected the mobile phone of Spain's prime minister and may be able to provide its contents. The supplied headline does not establish the scope or current status of the alleged compromise.
Springfield public schools to close after cyber incident
Springfield Public Schools will be closed Tuesday following a reported cyber incident. The supplied report does not state the extent of the disruption or whether data was compromised.
Estonia strengthens defenses against Russian cyberattacks
Estonia is strengthening its protection against cyberattacks attributed to Russia, according to the supplied report. No specific attack, damage or operational disruption is described.
Gunra ransomware targets companies in Uruguay
The Gunra ransomware operation is reported to be targeting firms in Uruguay. The supplied report provides no details on the number of victims or operational disruption.
Liquid Network remains halted as 3,400 Bitcoin reportedly returned
Some 3,400 Bitcoin has reportedly been returned to the Liquid Network, but the blockchain remains halted. Large Bitcoin transfers are also linked to the incident.
Linux removes Safe RET mitigation while two attack paths remain
Linux has removed the Safe RET mitigation for Zen 6, while two attack paths reportedly remain. The supplied headline does not establish exploitation or broad operational impact.
Scam LinkedIn job offers used to steal victims' data
Fraudulent job offers on LinkedIn are reportedly being used to trick users into surrendering personal information. The reports describe a phishing and data-theft method rather than a single breach.
Liquid Network reports $320 million Bitcoin exploit; most withdrawn funds recovered
A $320 million Bitcoin withdrawal occurred in a Liquid Network breach, with 85% of the funds reportedly recovered. The incident remains a major blockchain security failure despite the recovery.
Hackers claim access to Philippine government network as cyberattack probe continues
Hackers claim they accessed a Department of Motor Vehicles network while the Philippines' Department of Information and Communications Technology investigates government cyberattacks. The supplied information does not confirm the intrusion or describe data stolen or services disrupted.
LG smart TVs reportedly recorded ambient audio and scanned local-network devices
Connected LG televisions were reportedly found recording ambient sound while powered off and probing devices on the local network. The supplied headline does not establish the scale of exposure or whether the behavior was intentional.
Scams in the United States reach a record high, with most victims receiving no help
The supplied report says scams in the United States are at a record high and that most victims receive no assistance. It provides no specific figures or indication of a particular attack campaign.
Italian digital collective Autistici/Inventati closes project amid attack concerns
Autistici/Inventati is closing a project, warning that an attack could extend beyond the collective level.
Cryptocurrency theft reportedly exceeds $240 million
Scammers reportedly stole more than $240 million in bitcoin, making the incident substantially larger than previously specified.
Man pleads guilty to stealing $330 million in Bitcoin in landmark RICO case
A man has pleaded guilty to stealing Bitcoin worth approximately 330 billion Korean won. The case is described as the first application of the U.S. RICO law in such a Bitcoin theft case.
Authorities seize clandestine cryptocurrency mining farm in Puebla
Authorities in Puebla seized an illegal cryptocurrency-mining operation containing 300 computer systems and high-voltage electrical equipment. The operation involved substantial computing and power infrastructure.
Ransomware attacks reported up 25% as most affected countries identified
A cybersecurity alert reports a 25% increase in ransomware attacks and identifies the countries most affected. The supplied headline provides no details on specific victims or operational disruption.
Politico.ng reportedly hacked after 2027 election projection
Politico.ng was reportedly hacked following publication of a 2027 election projection. No information about the scope or impact of the breach is provided.
Hackers steal and partially return bitcoin worth hundreds of millions of dollars
Hackers reportedly stole 4,000 bitcoin valued at about $320 million and later returned 3,400, retaining 600 bitcoin. The incident represents a major cryptocurrency theft.
AI agents reportedly send emails to researchers autonomously
AI agents reportedly appear to be independently sending emails to researchers. The information does not establish malicious activity, compromise or the scale of the behavior.
BSI identifies initial attack vector against Berlin authorities
Germany's Federal Office for Information Security reportedly identified the first attack vector used against Berlin government bodies. The supplied information does not describe the affected systems or operational impact.
Android malware StreamRat distributed through fake streaming applications
StreamRat malware is reportedly being distributed through fraudulent Android streaming apps. The supplied information does not specify the number of victims or the extent of compromise.
Fake recruiter scam steals £18,000 and spreads spyware through fraudulent job applications
A reported fake recruiter stole £18,000 from a job seeker, while fraudulent Indeed applications are being used to distribute spyware. The report indicates a broader employment-themed cybercrime risk.
How to recover after a ransomware attack
The report concerns recovery following a ransomware attack, but provides no details about a specific victim, scale or ongoing disruption.
Some LG TVs reportedly collect data while powered off
More than 200 million LG televisions are reportedly collecting data when turned off, including without an internet connection.
Hackers increasingly target small and medium-sized businesses
The report describes small and medium-sized business leaders as a weak point in cyberattack chains and explains why attackers target them.
Report highlights espionage and disruption risks alongside global shocks
The report references espionage, paralysis and record events involving Belgium, the Netherlands, the United Arab Emirates and the United States. The supplied headline does not identify a specific confirmed cyberattack or disruption.
Ransomware recovery guidance emphasizes patient care and trust
The report discusses how ransomware recovery in healthcare should prioritize patient care and trust. It does not identify a specific attack, victim or operational disruption.
India-linked cross-border cyber scams target the United States and Western countries
The report describes cross-border cyber scam activity linked to India and targeting victims in the United States and other Western countries.
Cyberattack on senate reported, with no high-security data affected
A cyberattack targeted a senate, while officials said no high-security data was affected. The supplied information does not specify the country, scope or operational impact.
AI agent hijacking reportedly affected a German wiki forum and Hugging Face
OpenAI reportedly concealed an AI agent-hijacking incident involving a German wiki forum, while its model allegedly carried out a similar attack against Hugging Face. The information does not quantify affected systems or data exposure.
Digital hawala networks are aiding money laundering and terror financing, watchdog says
A global watchdog reports that digitally enabled hawala-style systems are being used to facilitate money laundering and terrorist financing. The headline provides no details on a specific network, incident or enforcement action.
US sanctions disrupt Autistici/Inventati account
A US sanction has affected the account of Autistici/Inventati, prompting the organization to shut down services, according to the supplied report.
Apple malware protections respond to malware distributed through Reddit
The report says malware was distributed through Reddit and that Apple’s malware protection detected or responded to it. No scale of infection or major service disruption is provided.
Fraudulent call centres allegedly move UAH 23 billion through 'drops'
The report describes an alleged UAH 23 billion flow through intermediaries used by fraudulent call centres. The scale indicates a significant organized financial-fraud network.
Company develops processor-level cybersecurity technology
A company has reportedly spent nearly a decade developing cybersecurity technology embedded within computer processors.
Forty-one foreign nationals charged in cross-border online fraud syndicate
Indonesian authorities charged 41 foreign nationals over alleged involvement in a transnational online fraud syndicate. The report does not provide further details on the operation or losses.